PT-2025-47732 · Uncanny Owl · Uncanny Automator

Published 2025-11-21 · Updated 2025-11-21 · CVE-2025-66056

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Uncanny Owl Uncanny Automator versions prior to 6.10.0

Description An issue exists in Uncanny Owl Uncanny Automator that allows retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere.

Recommendations Update Uncanny Automator to version 6.10.0 or later.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-66056

Affected Products

Uncanny Automator

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66056 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/uncanny-automator/vulnerability/wordpress-uncanny-automator-plugin-6-10-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1991856013444866470 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/uncanny-automator/vulnerability/wordpress-uncanny-automator-plugin-6-10-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note